We take your privacy seriously. WaypointQR is built with data protection as a core principle, not an afterthought.
Overview
WaypointQR is committed to protecting the privacy and security of all data processed through our platform. We comply with the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.
As a QR code management platform, we act as a data processor on your behalf. You, as the workspace owner, are the data controller who determines the purposes and means of processing personal data collected through your QR codes.
What data we process
Account data — your name, email, company details, and payment information provided during registration and billing.
Scan data — IP addresses, user-agent strings, approximate geolocation (country/region), and timestamps collected when users scan your QR codes. This data is linked to QR codes, not individual identities. We never collect names, emails, or phone numbers from people scanning your codes.
Your rights as a data subject
You have the right to access, export, correct, restrict, and delete your personal data. We provide API endpoints and dashboard tools to exercise these rights. Enterprise customers receive dedicated support for data subject requests and custom data retention policies.
Data retention
Scan event data is retained according to your plan (30 days to unlimited). Account data is kept for the duration of your account plus 90 days. Payment records are retained for 7 years as required by law. Enterprise customers can configure custom retention periods.
Data breach notification
If a data breach occurs, we will notify affected customers within 24 hours of becoming aware, in compliance with GDPR Article 33. Enterprise customers can configure webhook notifications for real-time breach alerts.
Contact our DPO
Data Protection Officer: dpo@waypointqr.com
Privacy inquiries: privacy@waypointqr.com
Postal address: WaypointQR Legal, 100 Market St, San Francisco, CA 94105, USA
Read the complete, detailed privacy documentation including API examples for data subject requests:
Read the complete, detailed privacy documentation including API examples for data subject requests:
View full GDPR documentation →